CVE-2022-28550
published 2023-06-13CVE-2022-28550: Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a…
PriorityP354critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.06%
60.6th percentile
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | jhead | < jhead 1:3.08-1 (forky) | jhead 1:3.08-1 (forky) |
| jhead_project | jhead | — | — |
| jhead_project | jhead | >= 0 < 1:3.08-1 | 1:3.08-1 |
| jhead_project | jhead | >= 0 < 1:3.08-1 | 1:3.08-1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
jhead 3.06 jhead.c shellescape stack-based overflow (Issue 51 / EUVD-2022-32992)
vuldb·2026-05-20·CVSS 9.8
CVE-2022-28550 [CRITICAL] jhead 3.06 jhead.c shellescape stack-based overflow (Issue 51 / EUVD-2022-32992)
A vulnerability was found in jhead 3.06. It has been rated as critical. Affected is the function shellescape of the file jhead.c. Performing a manipulation results in stack-based buffer overflow.
This vulnerability was named CVE-2022-28550. The attack needs to be approached within the local network. There is no available exploit.
To fix this issue, it is recommended to deploy a patch.
OSV
CVE-2022-28550: Matthias-Wandel/jhead jhead 3
osv·2023-06-13·CVSS 9.8
CVE-2022-28550 [CRITICAL] CVE-2022-28550: Matthias-Wandel/jhead jhead 3
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
GHSA
GHSA-phqx-gjxc-wrp9: Matthias-Wandel/jhead jhead 3
ghsa_unreviewed·2023-06-13
CVE-2022-28550 [CRITICAL] CWE-120 GHSA-phqx-gjxc-wrp9: Matthias-Wandel/jhead jhead 3
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
Debian
CVE-2022-28550: jhead - Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescap...
vendor_debian·2022·CVSS 9.8
CVE-2022-28550 [CRITICAL] CVE-2022-28550: jhead - Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescap...
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1:3.08-1)
sid: resolved (fixed in 1:3.08-1)
trixie: resolved (fixed in 1:3.08-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-13
Published